Re: [DNSOP] "Secure Unowned Hierarchical Anycast Root Name Service - And an Apologia" (circleid)

2014-11-14 Thread Wolfgang Nagele (AusRegistry)
Hi, AS112 absolutely proves that unowned anycast can work at scale; that's not my concern. But if my neighbor announces a route to the AS112 addresses, and then misconfigures a server, fills it with lies, or logs all my queries, the practical effect on me is pretty small: the worst case scenario

Re: [DNSOP] "Secure Unowned Hierarchical Anycast Root Name Service - And an Apologia" (circleid)

2014-11-14 Thread Wolfgang Nagele (AusRegistry)
One of my biggest concerns about the current proposal is that it seems to suggest that AS112 works. actually, the proposal doesn't mention AS112, but my discussion of the proposal here has mentioned AS112. Correct. I would like to find some definition of “works” and how we come to that conclusi